Symantec 10521146 - Network Security 7120 Administration Manual page 256

256 Managing log files
Exporting data
SESA 2.0
■
SESA Integration Package (SIP) installed on the SESA Manager, to register
■
Symantec Network Security with SESA 2.0
SESA Bridge installed on each software or appliance node that will send
■
events to SESA
SESA Agent
■
Symantec Event Manager for Intrusion Protection (The Symantec Event
■
Manager is optional. To view reports, you must install it, but to view raw
events, you do not need it.
See the Symantec Network Security Installation Guide and Symantec Network
Security 7100 Series Implementation Guide for more information about the SESA
Bridge.
Setting SESA Bridge Export
SESA Bridge Export serves as the on/off switch for sending events to Symantec
Enterprise Security Administrator (SESA). If this value is
to the local SESA Agent to be passed on to a SESA Manager. Note that you must
have a local SESA Agent installed and configured for the SESA Bridge to
function.
The default value is
false
software nodes, this default reflects whether or not the SESA Bridge was
installed during the installation process.
You can use either the default SESA Event Manager, or the IDS Event Manager.
The SESA Bridge option is not required to use Symantec Network Security in
native mode.
To configure this parameter
1 Click Configuration > Node > Network Security Parameters.
2 In Select Node, choose the node from the pull-down list, and click OK.
3 In the left pane under SESA Event Export, click SESA Bridge Export.
4 In the lower right pane, do one of the following:
Click True to enable the SESA Bridge.
■
Click False to disable the SESA Bridge.
■
5
Click Apply.
6
In Apply Changes To, select the node to which to apply the parameter.
7 Click OK to save the changes to this node and close.
on 7100 Series appliances. On Network Security
, events are sent
true